Web3 Hacks in 2022

2022 incident records, sorted by known loss. The strongest mapped pattern is Access Control (78 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
401 SEAMAN $7K bsc Unknown Details
402 Polynomial Protocol $7K optimism Other / Missing Input Validation Details Source2
403 FlippazOne $7K — Access Control Attacks Details
404 APC $6K bsc Oracle Manipulation & Price Manipulation Details
405 MBC & ZZSH $6K bsc Access Control Attacks Details
406 Xave Finance — ethereum Other / Malicious Proposal Details Source
407 3Commas — multi chain Exchange API credential exposure Details Source2
408 Golden Moon — binance Honeypot Details Source
409 Gemini — — Phishing Attacks Details Source23
410 TIFIToken — bsc Oracle Manipulation & Price Manipulation Details
411 Lodestar V0 — arbitrum Flash Loan Attacks Details Source
412 NOVAToken — bsc Admin Drain Details
413 BBOX — bsc Oracle Manipulation & Price Manipulation Details
414 RFB — bsc Missing Input Validation Details
415 Ratio Finance — solana Access Control Attacks Details Source
416 Overnight Finance — avalanche Unknown Details
417 Fairmoon — binance Honeypot Details Source
418 GeoDB — — Other Details Source2
419 Bad Guys by RPF — ethereum Incorrect Share Accounting Details
420 Acala — acala Infinite Mint Details Source
421 Impermax — ethereum, polygon Access Control Attacks Details Source
422 Vauld — — Other Details Source
423 GoldenEsse — binance Honeypot Details Source
424 Transaction Control Protocol — ethereum Honeypot Details Source
425 Drift Trade — solana Profit withdrawal accounting failure Details Source
426 Ebuy Finance — binance Honeypot Details Source
427 TreasureDAO — — Other Details Source2
428 StaticFire — binance Honeypot Details Source
429 DefiChain — defichain Incorrect Fee Accounting Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.